Infrastructure

North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs

Published: 24 July 2024
Categories: US-Computer Emergency Readiness Team

RSS feed source: US Computer Emergency Readiness Team

Summary

The U.S. Federal Bureau of Investigation (FBI) and the following authoring partners are releasing this Cybersecurity Advisory to highlight cyber espionage activity associated with the Democratic People’s Republic of Korea (DPRK)’s Reconnaissance General Bureau (RGB) 3rd Bureau based in Pyongyang and Sinuiju:

U.S. Cyber National Mission Force (CNMF) U.S. Cybersecurity and Infrastructure Security Agency (CISA) U.S. Department of Defense Cyber Crime Center (DC3) U.S. National Security Agency (NSA) Republic of Korea’s National Intelligence Service (NIS) Republic of Korea’s National Police Agency (NPA) United Kingdom’s National Cyber Security Centre (NCSC)

The RGB 3rd Bureau includes a DPRK (aka North Korean) state-sponsored cyber group known publicly as Andariel, Onyx Sleet (formerly PLUTONIUM), DarkSeoul, Silent Chollima, and Stonefly/Clasiopa. The group primarily targets defense, aerospace, nuclear, and engineering entities to obtain sensitive and classified technical information and intellectual property to advance the regime’s military and nuclear programs and ambitions. The authoring agencies believe the group and the cyber techniques remain an ongoing threat to various industry sectors worldwide, including but not limited to entities in their respective countries, as well as in Japan and India. RGB 3rd Bureau actors fund their espionage activity through ransomware operations against U.S. healthcare entities.

The actors gain initial access through widespread exploitation of web servers through known vulnerabilities in software, such as Log4j, to deploy a web

Click this link to continue reading the article on the source website.

EPA Issues Cleanup Plan for Shaffer Equipment Superfund Site in Minden, West Virginia

Published: 9 July 2024
Categories: EPA Air Quality

RSS feed source: US Computer Emergency Readiness Team

PHILADELPHIA – The U.S. Environmental Protection Agency (EPA) has issued a Record of Decision (ROD) that addresses a source of contaminated soil at the former Shaffer Equipment Company (SEC) property in Minden, West Virginia. Today’s ROD, which applies to the polychlorinated biphenyls (“PCBs”) located at the SEC property at the Shaffer Equipment/Arbuckle Creek Area Superfund Site (Site), lays out in detail why EPA has concluded that the proposed plan and selected cleanup method will meet the needs of the project.

“EPA’s Record of Decision is a significant step forward in protecting the community and waterway from the threat of contaminants like PCBs, and there is still more work to be done,” said EPA Mid-Atlantic Administrator Adam Ortiz. “EPA will continue to investigate and study the remaining portions of the site and will work with our partners at the U.S. Army Corps of Engineers to prepare for the cleanup of the property.”

The site is comprised of the SEC property, Arbuckle Creek sediments, and a handful of other areas where related contamination may be located. Site soils and sediment were historically contaminated with PCBs, which were used by the Shaffer Equipment Company from 1970 to 1984 to manufacture electrical substations for the local coal mining industry.

The components of the SEC property cleanup plan include the excavation, removal, and disposal of the contaminated soil

Click this link to continue reading the article on the source website.

People’s Republic of China (PRC) Ministry of State Security APT40 Tradecraft in Action

Published: 8 July 2024
Categories: US-Computer Emergency Readiness Team

RSS feed source: US Computer Emergency Readiness Team

Overview Background

This advisory, authored by the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), the United States Cybersecurity and Infrastructure Security Agency (CISA), the United States National Security Agency (NSA), the United States Federal Bureau of Investigation (FBI), the United Kingdom National Cyber Security Centre (NCSC-UK), the Canadian Centre for Cyber Security (CCCS), the New Zealand National Cyber Security Centre (NCSC-NZ), the German Federal Intelligence Service (BND) and Federal Office for the Protection of the Constitution (BfV), the Republic of Korea’s National Intelligence Service (NIS) and NIS’ National Cyber Security Center, and Japan’s National Center of Incident Readiness and Strategy for Cybersecurity (NISC) and National Police Agency (NPA)—hereafter referred to as the “authoring agencies”—outlines a People’s Republic of China (PRC) state-sponsored cyber group and their current threat to Australian networks. The advisory draws on the authoring agencies’ shared understanding of the threat as well as ASD’s ACSC incident response investigations.

The PRC state-sponsored cyber group has previously targeted organizations in various countries, including Australia and the United States, and the techniques highlighted below are regularly used by other PRC state-sponsored actors globally. Therefore, the authoring agencies believe the group, and similar techniques remain a threat to their countries’ networks as well.

The authoring agencies assess that this group conduct malicious cyber operations for the PRC Ministry of State Security (MSS).

Click this link to continue reading the article on the source website.

EPA Fines Two Oahu Nurseries over Federal Worker Protection Standard Violations

Published: 3 July 2024
Categories: EPA Air Quality

RSS feed source: US Computer Emergency Readiness Team

SAN FRANCISCO – Today, the U.S. Environmental Protection Agency (EPA) announced settlements of two cases involving agricultural worker protection, one with Olomana Orchids Inc., in Kaneohe, and one with Mari’s Gardens LLC, in Mililani. Both farms are located on the island of Oʻahu.

“Reducing pesticide exposure is a high priority for EPA. With our state partners, we’re focused on protecting agricultural workers and pesticide handlers,” said EPA Pacific Southwest Regional Administrator Martha Guzman. “All farms, nurseries, and agricultural establishments must follow pesticide label instructions and ensure their workers are properly trained to safely use and apply pesticides and work in treated areas.”

“The EPA’s Worker Protection Standard helps to protect the health and safety of Hawai‘i’s agricultural workers and their families,” said Sharon Hurd, chairperson of the Hawai‘i Board of Agriculture. “All agricultural operations should make it a priority to ensure the proper use of pesticides and to require proper training for workers.”

Olomana Orchids will pay $2,505 for failing to ensure that two of its workers had been trained in accordance with the Federal Insecticide, Fungicide and Rodenticide Act (FIFRA) Worker Protection Standard (WPS). Mari’s Gardens will pay $1,173 for failing to provide complete decontamination supplies to its handlers in accordance with the WPS. The State of Hawaiʻi conducted the inspections at each nursery in 2021 and  afterwards referred both

Click this link to continue reading the article on the source website.